Security Flaw in Linux Kernel Affects Request Handling

CVE-2026-43493

What is CVE-2026-43493?

A vulnerability in the Linux kernel has been identified in the crypto subsystem's handling of pcrypt requests. The issue arises from improper management of MAY_BACKLOG requests, which can incorrectly return an EBUSY value. This flaw can lead to erroneous EINPROGRESS notifications that may compromise system security by allowing unauthorized access to critical requests. Properly handling these requests is crucial for ensuring the integrity and reliability of cryptographic operations within the Linux environment.

References